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Fracture control requirements have been developed to address damage tolerance of 
composites for manned space flight hardware. The requirements provide the framework 
for critical and noncritical hardware assessment and testing. The need for damage threat 
assessments, impact damage protection plans, and nondestructive evaluation are also 
addressed. Hardware intended to be damage tolerant have extensive coupon, sub- 
element, and full-scale testing requirements in-line with the Building Block Approach 
concept from the MIL-HDBK-17, Department of Defense Composite Materials 
Handbook. 
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What is damage tolerance? Mil-HDBK-17-3F, paraphrased 

• Ability of a structure to sustain design loads in the presence of damage until 
the damage is detected, either through inspection or malfunction, and 
repaired (or replaced) 


• Damage Type? - For composites this includes delaminations, cuts, 
scratches, gouges, fiber breakage, porosity, microcracking, etc... 

• Damage Cause? - Fatigue, corrosion, environmental effects, 
accidental events, manufacturing, etc... 


Damage tolerance of composites has an integrated role with different aspects of 
composite structural assessment & test, design, manufacturing, material 
characterization, inspection, handling, and operation. 
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How does damage tolerance of composites fit within the framework of Constellation requirements? 
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• Hardware scope. 

• Manned spaceflight hardware including manned launch, retrieval, transport, and 
landing vehicles, space habitats, and payloads that are launched, retrieved, stored, 
or operated during any portion of a manned spaceflight mission. 

• Materials/structures types. 

• Covered by new standard: 

• Polymer matrix composites. 

• Sandwich construction. 

• Bonded metallics, bonded composites, or bonded metallic-composite. 

• Specifically excluded by new standard: 

• Metal and ceramic matrix composites. 

• Foam. 

• Flexible inflatable structures. 

• Liquid rocket engines. 

• Solid propellants. 
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MSFC- RQMT-3479 Development Approach 


• Cast requirements in the framework and language of existing NASA fracture 
control requirements. 

• Review other requirements in addition to NASA ones: 

• Aircraft - Military - Joint Services Specification Guide (JSSG) 2006 

• Aircraft - Civil - FARs/MIL-HDBK- 1 7F 

• General literature 

• Address the shortcomings of previous NASA fracture control requirements. 

• Developed requirements with significant input from NASA Fracture 
Methodology Panel members during 2004 and 2005 

• Rely on ANSI/AIAA S-08 1-2000 for COP Vs. 

• Refer to MIL-HDBK-17F for specific methodologies. 
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Classification of Composite Parts and Bonds for Fracture Control 


A part (or bond) is fracture critical if its failure due to the presence of a flaw would result 
in a catastrophic hazard. All composite parts and bonds shall be classified according to 
the following: 


Exempt 

• Non-structural and 
no safety critical 
function 


Non-Fracture Critical Fracture Critical 

• Low released mass • Proofed 

• Fail safe • Damage tolerant 

• Contained 

• Low risk 

• Non-hazardous leak before burst 
(NHLBB) 


How does this affect hardware development? 
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Ares I Primary Structure Composite Hardware 


Filament Motor Cases 

Aeroshell 

Load frame/struts 


Spacecraft Adapter t 
Forward Skirt — 


Launch Abort System 

Crew Exploration Vehicle (CEV) 

(Crew Module / Service Module) 

Instrument Unit 


Common Bulkhead 
Sandwich 

Carbon/Carbon 

Nozzle 

Honeycomb Sandwich 
Interstage & Frustum 

Aeroshell 


Carbon/Phenolic 

Nozzle 


||jj Upper Stage 
-• J-2X Upper Stage Engine 
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Different tasks are performed depending on fracture control classification 

• Task 1 : Identify the source and type of impact damage that poses a credible threat to the hardware 

• Task 2: Characterize the impact damage size and energy level to be considered during all types of damage 
tolerant tests 

• Task 3: Generate an as-manufactured initial flaw type and size assessment for the hardware 

• Impact Damage Protection Plan (IDPP) 

• Plan required for all hardware except exempt, low released mass, and contained 

• Plan addresses each threat identified in DTA 

• Protection method (or monitoring method) must be addressed for each threat identified in DTA 

• Mitigates risk of impact damage; does not eliminate risk 

• Credible impact damage, identified in the DTA, must be addressed during damage tolerant tests, even for 
protected hardware 

• Inspections & NDE 

• Methods discussed in MIL-HDBK-17; POD information typically not available (no 90/95 standard sizes); 
special visual & walk-around inspections are included 

• Damage used to develop residual strength and life curves must be detectable by some form of inspection 
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• Building Block Approach based on MIL-HDBK-17 

• Coupon Tests 

• Generate a family of life and residual strength curves with damage in appropriate 
environment 

• Determine damage configuration and sizes from the DTA (Task 2 & 3)and NDE 
capability 

• Establish no-growth threshold strain for low risk parts 

• Support analysis and design to assure success of full-scale tests 

• Development Tests 

• Evaluate structural elements representative of flight design 

• Demonstrate residual strength and life capability for the design spectrum with damage 

• Assist in any anomaly resolution & guide the design toward successful full-scale tests 

• Full-Scale Component Tests 

• Verify full-scale flight-like components with induced damage sites 

• Demonstrate the ability of the structure to sustain design loads for 1 lifetime, including 
a load enhancement factor (LEF), and a subsequent design ultimate load (DUL) with no 
damage growth or initiation 

• Demonstrate the ability of the structure to sustain design loads for 4 lifetimes, including 
an LEF, and a subsequent design limit load (DLL) with no damage initiation and no 
structural failure 
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Implications for Hardware Development 

• Analysis 

• Primary purpose is to assist in assuring a successful full-scale damage tolerance test 

• Potential methods 

• Strength assessment with residual strength allowables 

• Advanced methods such as the virtual crack closure technique (VCCT) 

• Future updates to MIL-HDBK-17 

• Data 


• Statistical basis 

• A-Basis (99/95) for Ultimate Strength per MIL-HDBK-17 

• Load Enhancement Factor (LEF) per MIL-HDBK-17 

• LEF for fatigue spectrum sufficient to establish A-Basis reliability on life 

• Requires Weibull shape parameters for residual strength and fatigue life tests 

• Damage tolerance coupon tests 

• Sufficient number to develop Weibull shape parameters 

• Sufficient number to encompass DTA and NDE damage sizes 

• Impact testing 

• Sufficient number to develop impact energy, size, and configuration curves 
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The material property requirements for the Constellation Program flow from the Level II Constellation 
Architecture Requirements Document (CARD) to NASA-STD-6016, Standard Materials and Processes 
Requirements for Spacecraft. Specifically, Section 4.1.6, Material Design Allowables, describes which values 
shall be used for strength allowables. A-Basis strength allowables (99% reliability / 95% confidence level) are 
required for primary structure unless redundancy exists; B-Basis (90/95) may be used for redundant structure. 
S-Basis allowables are discussed for metallic components; composites do not use S-Basis allowables (spec 
minimum with least statistical confidence). 


Level 11 CARD 





NASA-STD-6016 

M&P Standard 










A-Basis 

Primary Structure 


B-Basis 

Redundant Structure 


S Data Class 

Screening Only 



MIL-HDBK-1 7 Techniques 
(New Designation: CMH-17) 
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The composite damage tolerance requirements flow from the Level II CARD to NASA-STD-5019, Fracture 
Control Requirements for Spaceflight Hardware, into MSFC-RQMT-3479, Fracture Control Requirements for 
Composite and Bonded Vehicle and Payload Structures. Specific requirements for use of statistical based 
approaches are discussed for the “Fail-Safe” category and for the full-scale damage tolerance test. No 
specific requirements are listed for development of damage tolerance design values. 


Damage tolerance design values 
are not “ material properties " in the 
traditional sense. These values 
are dependent on geometry, material 
system, and configuration. 





CMH-17 Techniques 
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M&P Approach for strength allowables and damage tolerance design values 


Composite material strength allowables used for qualification of flight hardware shall be 
determined using the A-Basis statistical techniques as defined in MIL-HDBK-17, or an MSFC - 
approved equivalent approach. 

Consistent with NASA-STD-6016 

Composite damage tolerance and no-growth threshold design values used for qualification of 
flight hardware shall be determined from the B-Basis statistical techniques as defined in MIL- 
HDBK-17, or an MSFC-approved equivalent approach. 

Appropriate for Fracture Control/Damage Tolerance of Composites 
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Why is A-Basis necessary for strength allowables? 

• Provides greatest level of confidence for margin of safety prediction 

• Meets requirements in NASA-STD-6016 

Why is B-Basis sufficient for damage tolerance design values? 

• Full-scale damage tolerance test will include demonstration for 99/95 capability based on 
MIL-HDBK-17 load enhancement factor approach 

• Fracture control premise is to address damage tolerance capability of composites with 
assumed damage site. Known damage typically requires repair or more stringent use-as-is 
rationale 

• Current available data in MIL-HDBK-17, Volume 2, Data Annex is B-Basis 

• Commercial aircraft approach uses B-Basis 
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TABLE 2.5.3. Minimum sampling requirements for MIL-HDBK-17 data classes. 



Minimum Requirements 

Designation 

Symbol 

Description 

Number of 
Batches 

Number of 
Specimens 

A75 

A 

A-Basis - Robust 
Sampling 

10 

75 

A55 

a 

A-Basis - Reduced 
Sampling 

5 

55 

B30 

B 

B-Basis - Robust 
Sampling 

5 

30 

B18 

b 

B-Basis - Reduced 
Sampling 

3 

18 

M 

M 

Mean 

3 

18 

1 

1 

Interim 

3 

15 

S 

S 

Screening 

h 1 

5 


Statistical techniques to compute the A (99/95) or B (90/95) value are given in Volume 1 of MIL-HDBK-17 


A-Basis (or A-Value) - A statistically-based material property; a 95% lower confidence bound on the 
first percentile of a specified population of measurements. Also a 95% lower tolerance bound for the up- 
per 99% of a specified population. 


B-Basis (or B-Value) - A statistically-based material property; a 95% lower confidence bound on the 
tenth percentile of a specified population of measurements: Also a 95% lower tolerance bound for the 
upper 90% of a specified population. (See Volume 1, Section 8.1.4) 
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Example of a potential MSFC equivalent approach 

Fundamental needs: 

Demonstrate that variance concerns have been addressed. 

Provide at least 30 degrees of freedom for 3 lots/batches of material to 
develop a design curve - 33 data point per design curve to account for 
variation, temperature, and capability. This will avoid small sample 
assumptions during statistical assessment. 

Develop sufficient approach for environmental or other knockdowns 
Provide data for use in reduction of design curves 
Provide for tag-end or witness sample testing for each unit manufactured 

Acceptance testing provides demonstration that minimum design allowables 
are maintained for each unit produced in lieu of a full A-Basis data set (data 
class A75) 
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Example alternative approach for developing strength allowables 

• Determine the failure modes of concern and the associated material capability value needed to 
assess structural integrity 

• Test a sufficient number of batches and specimens to define the distribution type at each 
temperature and environment of interest. Guidelines for data sample sizes can be found in MIL- 
HDBK-17F, Volume 1. General guidance is at least 3 lots/33 data points per design curve. 

• Use the appropriate statistical knockdown factor to determine the 99% probability/95% confidence 
predicted allowable (A-Basis equivalent) for the limited data set available. 

• Perform tag-end or witness sample tests for each unit manufactured to demonstrate capability 
greater than the predicted strength allowable for the most critical failure mode 

• Maintain and update the database of test information to address potential changes to the A-Basis 
equivalent capability for the most critical failure mode 
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Examples of MSFC-RQMT-3479 Criteria 
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Hardware Design 


Analytical Support 
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Damage Tolerant Full-Scale Component Test 


Induce Flaws per 
Section S.3.2.6 


Design 
Ultimate Load 
Test 


1 Lifetime Test 


Full NDE 


Full NDE Full NDE 


No flaw 1 growth allowed 
No flaw initiation allowed 


Design 
Limit Load 
Test 


1 Lifetime Test 



I Lifetime Test • 


No flaw initiation allowed 



1 Lifetime Test • 


Full 


NDE 


Demonstrate by test(s) that there is no catastrophic failure due to flaws 
during (or following if appropriate) the design limit load test, and that 
the component performs as structurally and mechanically intended: 

> no structural failure, burst, etc. 

> no catastrophic leak due to flaws 

> no catastrophic mechanical malfunction 

> structurally and mechanically peforms design function 
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Application/ Examples -MIL-HDBK-17-3F - Figure 7.9.1.6 

Rotocraft (Sikorsky) 

Damage Tolerant Certification Procedure Schematic 


◄ No growth allowed ► 
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Application/ Examples -MIL-HDBK-17-3F - Section 7.9.2 


Commercial Aircraft - Boeing 777 Empennage Torque Boxes 
Preproduction Horizontal Stabilizer Test Sequence - Demonstrate “No Growth” 


Boeing 777 — Composite Usage 

• Empennage Torque Boxes 

* Passenger Floor Beams 

♦ Aero Fairings and Other Secondary Structures 


FIN 

TORQUE BOX 


WING FIXED 
LEADING EDGE 


TRAILING 

EDGE 

PANELS 


OUTBOARD 

WLERON 



NOTE: 

ALL EFFECTI VT 
NOT SHOWN 


NOSE LANDING 
GEAR DOOR 


“Small" damages 

1 1: 


“Visible’' damages 

Z 


©I ® Id © !®l®®bfe 


“Element" damages 
j ^ ( — Repair visible 

& element damages 


I 



® 

© 

(jO 

® 

( 5 ) 

*® 

® 


Apply small damages 1 
60% design limit strain survey - 6 conditions 
Flight test instrumentation check-out 
Fatigue spectrum - 1 lifetime 
including load enhancement factor 
60% design limit strain survey * 3 conditions 
Fatigue spectrum - 1 lifetime 
including load enhancement factor 
Design limit strain survey - 6 conditions 
Design ultimate loads - 3 conditions 
Apply visible impact damages 'Z 
Fatigue spectrum - including load 
enhancement factor - two inspection periods 
Fail safe (limit) loads - 3 conditions 
Apply element damages 3 


® "Get home" loads (approx 70% 
limit) - 3 conditions 
Repair visible and element damages 
Q® Design ultimate loads - 3 conditions 
( 11 ) Destruction lest 

1 "Small" damages - impacts at an energy 
level less than 1200 in-lb whose 
resulling damage is visible at a distance 
of less than 5 feet. 

Z . "Visible’ damages - readily detectable 
during the scheduled inspection plan 
3 “Element" damages - complete or partial 
failure ol one or more structural units. 
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Summary Sheet - Composite Fracture Control Classifications and Requirements 



Non-Fracture Critical 

Fracture Critical 


Contained 



Requirements 

LOW 

Released 

Mass 

Fail Safe 

Metallic 

Enclosure 

Composite 

Enclosure 

Low Risk 

NHLBB 

Proof 

Tested 

Damage 

Tolerant 

Reference Section 

5.2.1 

5.2.2 

5.2.3.A 

5.2.3.B 

5.2.4 

5.2.5 

5.3.1 

5.3.2 

No catastrophic hazard/loss of SCF 

X 

X 

X 

X 


X 



Part must be larqer than open holes 



X 

X 





Enclosure/container not FC 




X 


X 



Not a pressure vessel 





X 

X 



No hazardous fluid 





X 

X 



FOS on containment 



1.0 Fty, 
analysis or 
lest 

1.15 ptratn 
test, or 1.15 
ptratr anlys 
s/b test 





DUL capability 

NFC 

impacted 
parts - vert 
by test 



w4 imp act 
damage > 
NDE.from 
loose part, 
DTA, or 
imposed - 
verf by test 

w/impact 
damage > 
NDE, DTA, 
or imposed - 
verf by test 

at Ult FOS x 
MDP 
w/impact 
damage > 
NDE, DTA, 
or imposed - 
verf by test 


Per Fiq. 5 

Inspections 









1 . Visual 









a. Walkaround 








between 
each flight 

b. Special Visual 


pre and post 
proof, and 
between 
flights 


pre and post 
proof, and 
between 
flights 

pre and post 
proof, and 
between 
flights 

pre and post 
proof, and 
between 
flights 

pre and post 
proof, and 
between 
flights 

pre and post 
proof, and 
after every 
3"* flight 

2.NDE 


pre and post 
proof 


pre and post 
proof 

pre and post 
proof 

pre and post 
proof 

pre and post 
proof 

pre and post 
proof 

Proof tested f<S0% Uft) T 

Foot Note 1 

Foot Note 1 

Foot Note 1 

Foot Note 1 

Foot Note 1 

Foot Note 1 

1.2 x limit, 
initially and 
between 
flights 

Initially, 1.05 
min x limit 

DTATask 1 


X 


X 

X 

X 

X 

X 

DTATask2 




X 2 

x 2.3 

X 2 


X 

DTATask 3 





X 3 



1 X 

IDPP 


X 


X 

X 

X 

X 

X 
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Summary Sheet - Composite Fracture Control Classifications and Requirements 



Non-Fracture Critical 

Fracture Critical 


Contained 



Requirements 

LOW 

Released 

Mass 

Fail Safe 

Metallic 

Enclosure 

Composite 

Enclosure 

LowRisk 

NHLBB 

Proof 

Tested 

Damage 

Tolerant 

Reference Section 

5.2.1 

5.2.2 

5.2 .3. A 

5.2.3.B 

5.2.4 

5.2.5 

5.3.1 

5.3.2 

Damage tolerant coupon tests 





X 3 



X 

Damage tolerant development tests 








X 

Damage tolerant full-scale component 
tests 

FC impacted 
parts 

FC impacted 
parts 






Per Fig. 5 

Traceability (Section 6.4) 


X 


X 

X 

X 

X 

X 

Unique Requirements 









Pressurized enclosures shall have the 
characteristic of being NHLBB 




X 





Walls shall leak < MDP, Verf. by test 






forTTF 10 1 
or 1 inch 



Wall shall not burst @ Ult x MDP, Verf. 
By test 






forTTF lOt 
or 1 inch 



Flaw shall not grow@ Ujt x MDP, Verf. 
Bvtest 






forTTF lOt 
or 1 inch 



No repressurization as pressure leaks 
down 






X 



Generally limited to payloads 







X 


Internal to payload .vehicle, module 

X 


implied 

implied 





Debris shall meet low mass 


X 







Below no- growth threshold strain 





X 




Remaining struc analyticallyassessed 
at 1.15 x redistributed dynload 


x - analytical 
meth verified 
bytest 







Remaining impacted struc must 
support 1 .15 x redistributed limit load 


x - NFC 
parts -verf 
by test 







See also 5003 for Shuttle payload 

X 








No HERM, HMRM, hab mod, SPF 
bond 





X 





Foot Notes: 

1. NASA-STD-5001 requires prooftest of all composite parts/structures to 1.05/1.20. 

2. Required to the extent needed to establish impact damage size for DUL capability test (Line 11). 

3. Required to the extent needed to determine no-growth threshold strain (Line 35). 
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BACKUP 

Example of Technical Issue 
Investigated during Development of 
MSFC-RQMT-3479 
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No-growth Threshold Strain 


The no-growth threshold strain is the strain level below which flaws of 
interest do not grow in 10 6 (10 8 for rotating hardware) cycles at the 
applicable load ratio. 

The no-growth threshold strain is establish by test. 

This strain is needed for the low risk classification or in the truncation 
of tests spectra. 

The issue was: 

• Can we specify a default value, say “some” percent of ultimate 
strength that would be applicable for all situations and avoid 
testing to establish the no-growth threshold strain? 
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Review of the Literature 


• Threshold strains not addressed in ASTM standards. 

• Literature confusing, can be misleading and easily misunderstood. 

• “Threshold” may refer to undamaged state as in “endurance limit”. 

• Thresholds are sometimes addressed as percent of static undamaged strength 
and sometimes as percent of strength after damage. Also addressed as a 
percent of the critical strain energy release rate. 

• Strain range (R) is important as well as strain magnitude. 

• Numbers quoted as thresholds are generally application specific. 

• Look at a specific case to gain some insight: 

• Han, H. T., Mitrovic, M., and Turkgenc, O., “The effects of Loading Parameters 
on Fatigue of Composite Laminates: Part III”, DOT/FAA/AR-99/22, June 1999. 
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Constant-Amplitude Compression-Compression (R - 

N 


Specimen 

Load Level 

Number of 

Impact-Induced 



Number 

r%ofCSAIl 

Cycles 

Damage Growth 



32A6 

40% 

1.000,000 

no 



32A7 

40% 

1.000.000 

no 



31C7 

40% 

1,000.000 

no 



33B1 

50% 

1,000,000 

no 



31D4 

50% 

1,000,000 

no 



33B4 

50% 

1,000.000 

no 

N = 0 

N= 5.000 



Specimen 

Hydraulic Grips 
N = 500.000 i 


31E5 

60% 

1,000,000 

no 

00 

34A8 

60% 

>500.000 

yes 

s 

31D3 

60% 

1.000.000 

no 

► o 

33B2 

70% 

141.607* 

yes 

1 

tt> 

31F2 

70% 

>10.000** 

yes 

35A6 

70% 

>100.000 

yes 






" / i 

4 


& 


. .. m 


33F3 

80% 

136* 

yes 

31E1 

80% 

587* 

yes 

33C3 

80% 

>1,000 

yes 


* indicates cycles to final failure 

** indicates number of cycles tliat causes propagation of delammation to the tab region 


N= 10 


N = 100 


N= 1.000 


N= 10.000 


At 70% load level, always get growth. 


< 

</> 

o 

o 

£ 

o 

c- 



No-growth at 60% CSAI is misleading. 
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N = 0 


High first 


N= 100 




100 cycles @ 70% 

** 



Then low 
@ 30 % 


N= 10.000 N= 100.000 N= 500.000 N= 1,000,000 



Note growth at 30% CSAI, 2 nd block 
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I -»M B Ka ga— — 

Spectrum Loading - High/Low - 2 nd Block Growth 




■ AS = 60% CSA1 
♦ AS = 50% CSA1 
O AS = 40% CSAI 
A AS = 30% CSAI 


S_._ = const. = 0% CSAI 

r Cl 


io° io 1 io 2 io 3 io 4 io 5 io 6 Cycles 


Load Cases 

Constant maximum load, 
variable load range 

- S max = constant = 0% CSAI 

- AS = 30, 40, 50, 60% CSAI 


Note growth at 30% CSAI 
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No-Growth Threshold Issue Example 
Conclusion and Recommendation 


Data exist that show flaw growth can occur at cyclic loads that are quite 
low (< 30% CSAI), whereas other data show quite high loads are required 
to initiate flaw growth. 

Thresholds discussed in the literature are application specific. 

Specifying a generic threshold lets the developers off the hook for 
understanding their hardware and its application. 

Not comfortable with choosing a single number for all applications. 
Recommendation: 

• Require developers who need a threshold value to generate one by test. 

• Allow use of existing data if verified by tests for current application. 
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